Back to results
US 2016/0080422 A1Published application
Transforming business policies to information technology security control terms for improved system compliance
AssigneeInternational Business Machines Corporation
InventorsBrian M. Belgodere, Lorraine M. Herger, Shakil M. Khan, Matthew A. McCarthy, William J. Rippon
Life of this patent
Estimating the term…
Abstract
A hierarchically layered group of domain-specific enhanced enterprise ontologies where each domain layer is connected to the immediate domain layer below through a layer policy/control/context translation ontology. Security controls discovery and a mapping ontology is semantically integrated to domain meta models in each layer and a corresponding security controls knowledge base.
Claims18
A method comprising:
- establishing a first ontology data structure having a hierarchical description including a business-based meta model;
- establishing a second ontology data structure having a hierarchical description including a first external compliance dataset;
- determining a set of compliance constraints based on a set of inference rules and the first external compliance dataset;
- applying the set of compliance constraints to the first ontology data structure to establish an updated first ontology data structure;
- and
- determining a degree of performance based on the updated first ontology data structure;
- wherein:
- at least the actions of determining a set of compliance constraints and determining a degree of performance are performed by computer software running on computer hardware.
5 more elements
A computer program product comprising a computer readable storage medium having stored thereon:
- first program instructions programmed to establish a first ontology data structure having a hierarchical description including a business-based meta model;
- second program instructions programmed to establish a second ontology data structure having a hierarchical description including a first external compliance dataset;
- third program instructions programmed to determine a set of compliance constraints based on a set of inference rules and the first external compliance dataset;
- fourth program instructions programmed to apply the set of compliance constraints to the first ontology data structure to establish an updated first ontology data structure;
- and
- fifth program instructions programmed to determine a degree of performance based on the updated first ontology data structure.
3 more elements
A computer system comprising:
- a processor(s) set;
- and
- a computer readable storage medium;
- wherein:
- the processor set is structured, located, connected and/or programmed to run program instructions stored on the computer readable storage medium;
- and
- the program instructions include:
- first program instructions programmed to establish a first ontology data structure having a hierarchical description including a business-based meta model;
- second program instructions programmed to establish a second ontology data structure having a hierarchical description including a first external compliance dataset;
- third program instructions programmed to determine a set of compliance constraints based on a set of inference rules and the first external compliance dataset;
- fourth program instructions programmed to apply the set of compliance constraints to the first ontology data structure to establish an updated first ontology data structure;
- and
- fifth program instructions programmed to determine a degree of performance based on the updated first ontology data structure.
10 more elements
Dependencies are inferred from the claim text.